# Installing Arch Linux on a Microsoft Surface 3

Written on January 26, 2018

A few years ago, I was given a Microsoft Surface 3 tablet that has since fallen into disuse. I was appreciative of the gift, though to be honest the Intel Atom CPU it came with is fairly underpowered when it comes to running Windows 10, so I decided to install a light Linux distro on it to get the tablet back into running order. I came across the blog post Running Arch Linux on a Surface 3 by Chad Voegele, which was fairly useful in getting started, and I wanted to write a post of my own to share some addition details and places where I diverged from Chad’s post along the way.

The biggest difference is that I had no intentions of dual booting Windows alongside Linux, so I disregarded any shrinking of the Windows partition or having to consolidate the Windows partition into one part of the SSD. Past that, I followed the overall path that Chad outlines with some minor modifications/details.

# Disable Secure Boot

We’ll first need to disable the Secure Boot feature that checks installed kernels against an approved list, since we’re installing one that one be pre-approved by Microsoft.

1. From the powered off state, hold the volume up button, press and then release the power button, and keep holding the volume up button until the BIOS screen appears
2. Using the keyboard, go to the Secure Boot option, press enter to show the selection dialog, and then select Disable to disable Secure Boot
3. From the BIOS screen, also change the boot order from SSD to Network > USB > SSD before moving on

# Install Arch Linux

First install Arch Linux to a USB drive and then follow the Arch Linux wiki’s excellent installation guide. I didn’t have any problems with verifying that the Surface booted in UEFI mode or with the keyboard, but I did have to fight with the WiFi

## WPA 2 Enterprise WiFi on the Surface 3 from Arch Linux

The BYU CS department where I was performing this operation uses WPA2 Enterprise for their wifi network, which made things a bit more complicated. From the WPA_supplicant page I found the the following WPA_supplicant configuration file allowed for connection to the network (_Note:_ You’d need to replace the text in between and including the angle brackets with your relevant information):

# File: /etc/wpa_supplicant/wpa_supplicant.conf

ctrl_interface=DIR=/run/wpa_supplicant
ap_scan=1
fast_reauth=1
network={
scan_ssid=1
ssid="<ssid>"                     # Replace this
key_mgmt=WPA-EAP
eap=PEAP
phase1="peaplabel=0"
phase2="auth=MSCHAPV2"
}


Then, with my wifi adapter being located at /dev/wlp1s0, the following commands brought up the adapter, configured wpa_supplicant, and then obtained an IP address via DHCP:

# ip link set dev wlp1s0 up
# wpa_supplicant -B -i wlp1s0 -c /etc/wpa_supplicant/wpa_supplicant.conf
# dhcpcd wlp1s0


## Partitioning the SSD

Continuing through the installation instructions, the next bit of trouble I had was with partitioning the SSD. Again, I didn’t care about not erasing the Windows partition since I do not want to dual boot Windows and Linux, so I erased the partition table for the drive and started to create my own. The problem that I ran into was that gdisk did not seem to correctly write the new partition table, but using parted did. If the SSD for my Surface was located at /dev/sdX (change as needed to your correct device name, which you can find by running # fdisk -l), then I used the following commands to delete the old partition table, create a new one, and then create

1. The EFI System Partition (ESP)
2. A swap partition
3. A single root partition
# parted /dev/sdX
(parted) print                                      # View existing partitions
(parted) rm x                                       # Replace x with partition number
# Remove all of the partitions
(parted) mklabel gpt                                # Create new GPT table
(parted) mkpart ESP fat32 1MiB 550MiB               # ESP part. w/ 550 MB
(parted) set 1 boot on                              # Set as ESP (boot) partition
(parted) mkpart primary linux-swap 550MiB 1.5GiB    # Swap partition w/ ~1GB
(parted) mkpart primary ext4 1.5GiB 100%            # Remaining space to root/home part.


## Formatting the partitions

Continue with the installation instructions to format the partitions:

# mkfs.vfat /dev/sdX1
# mkswap /dev/sdX2
# swapon /dev/sdX2
# mkfs.ext4 /dev/sdX3


## Mount the partitions

Next, we’ll mount our root partition and then the ESP:

# mount /dev/sdX3 /mnt
# mkdir /mnt/boot
# mount /dev/sdX1 /mnt/boot


I continued with the installation instructions without any deviations until reaching the Boot loader section. From the bash shell on your mounted partition (where you should already be by running # arch-chroot /mnt), follow the recommendations to install the intel-ucode package:

# pacman -S intel-ucode


Then exit the bash terminal from your mounted partition, which will return you to the zsh session from the Arch Linux on your USB drive. From here, we’ll need to find the partition UUID, as described in the Systemd-boot page

You can find the PARTUUID for your root partition with the command blkid -s PARTUUID -o value /dev/sdxY, where x is the device letter and Y is the partition number. This is required only for your root partition, not esp.

Run the indicated command, then replace XXXX in the code segment below with the appropriate UUID, and then save the file at /mnt/boot/loader/entries/arch.conf:

title   Arch Linux
linux   /vmlinuz-linux
initrd  /intel-ucode.img
initrd  /initramfs-linux.img

Note that we added an additional initrd line to enable the Intel microcode updates in conjunction with the intel-ucode package we previously installed.